Trusted Platform Module strengthens platform identity and key protection
Hardware-backed trust is provided by the ST33KTPM2X32DKJ1 trusted platform module (TPM) from STMicroelectronics, protecting platform identity, keys, and critical data in consumer systems.
Platform security in personal computers (PC), servers, network equipment, and connected endpoints increasingly relies on a hardware root of trust. The TPM can protect credentials, support measured boot, and provide evidence that a system remains in a known state. The ST33KTPM2X32DKJ1 is part of the STSAFE-TPM family and implements the Trusted Computing Group (TCG) TPM Library.
The ST33KTPM2X32DKJ1 targets compliance with Microsoft® Windows® 10 and 11, Linux® drivers, and Intel® vPro® technology across supported deployment environments. It also complies with the TCG test suite for TPM 2.0 and the open-source TCG TPM 2.0 TSS implementations.
A fault-tolerant firmware loader helps keep the TPM functional if a firmware loading process is interrupted. The firmware image is signed with the elliptic curve digital signature algorithm (ECDSA) and post-quantum cryptography (PQC) Leighton-Micali signature (LMS), supporting a firmware-update mechanism designed for long-term security maintenance.
Also, it provides firmware and critical data self-recovery in line with NIST SP800-193 protection, detection, and recovery requirements. Security protections include an active shield, monitoring of environmental parameters, and hardware and software countermeasures against fault-injection and side-channel attacks. Cryptographic services cover key generation, signatures, encryption, hashing, message authentication, and random-number generation.